From 5b9242bf293390041478cd0951218520cea9333b Mon Sep 17 00:00:00 2001
From: Mohammad Yosefpor <myusefpur@gmail.com>
Date: Mon, 28 Feb 2022 01:52:15 +0330
Subject: [PATCH] fix: role

---
 config/rbac/role.yaml               | 20 ++++++++++++++++----
 controllers/namespace_controller.go |  4 +++-
 2 files changed, 19 insertions(+), 5 deletions(-)

diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
index 8c3e2f3..b79c706 100644
--- a/config/rbac/role.yaml
+++ b/config/rbac/role.yaml
@@ -10,12 +10,8 @@ rules:
   resources:
   - namespaces
   verbs:
-  - create
-  - delete
   - get
   - list
-  - patch
-  - update
   - watch
 - apiGroups:
   - ""
@@ -31,6 +27,22 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - ""
+  resources:
+  - serviceaccounts
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - integreatly.org
   resources:
diff --git a/controllers/namespace_controller.go b/controllers/namespace_controller.go
index 755c959..6b1b8f6 100644
--- a/controllers/namespace_controller.go
+++ b/controllers/namespace_controller.go
@@ -42,9 +42,11 @@ type NamespaceReconciler struct {
 	Scheme *runtime.Scheme
 }
 
-//+kubebuilder:rbac:groups=core,resources=namespaces,verbs=get;list;watch;create;update;patch;delete
+//+kubebuilder:rbac:groups=core,resources=namespaces,verbs=get;list;watch
 //+kubebuilder:rbac:groups=core,resources=namespaces/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups=core,resources=namespaces/finalizers,verbs=update
+//+kubebuilder:rbac:groups=core,resources=serviceaccounts,verbs=get;list;watch
+//+kubebuilder:rbac:groups=core,resources=secrets,verbs=get;list;watch
 
 //+kubebuilder:rbac:groups=integreatly.org,resources=grafanadatasources,verbs=get;list;watch;create;update;patch;delete